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Reimagine your corporate network and prepare for the future with our 
Zero Trust Network-as-a-Service platform. 


Replace expensive, proprietary circuits with a 
single global network that provides built-in Zero 
Trust security, L3-7 DDoS mitigation and network 
firewalling, and traffic acceleration. 


Connect users to resources simply and securely 
with no VPN, accelerating new user onboarding 
time by 60% for some customers. Block lateral 

movement, ransomware, malware, and phishing. 


Cloudflare One is our 

(SASE) by combining network connectivity 
services with Zero Trust security services on one 
of the fastest, purpose-built global networks. 


Why now? 


Since the start of the pandemic, there’s been a... 


increase in remote 
knowledge workers 


increase in cloud 
adoption 


increase in ransom DDoS 
and ransomware attacks 


Every 
data center 


1 O >1 Improve business agility 
and save on cost 
Replace ten point products with one 
composable platform — Cloudflare One is 
easier to deploy and addresses more 
needs than solutions stitched together 
across many vendors. Reduce operational 
costs by managing your WAN and network 
security through a single dashboard. 
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Remote Users SaaS Apps 


Instead of granting full trust and access to users once they’re on 
the corporate network, Zero Trust uses a proxy-based, 
default-deny architecture that dictates authenticating and 
authorizing every request into, out of, and between entities on 
your network — ensuring that users can only get to applications 
they’re explicitly allowed to access. 


All security, performance, and reliability 
functions are designed to run on every 
single server in every Cloudflare data 
center on our network that today spans 
270+ cities. Running the full stack of 
services everywhere ensures all 
Every Every customer traffic is inspected at the same 
server service Ri z 
data center that is closest to its source. 


aL 9 5 % Reduce your Connects to what 

O attack surface you already use 
Cloudflare One uses our edge to stop any Cloudflare One is an open 
size network-level threat at wire speed, platform that supports the 
and places our edge between users and identity, endpoint, cloud, 
their application access and internet and network on-ramp 
browsing to reduce attack surface and providers you already use. 
shorten remediation times (note: Gartner Easy to use, integrate once. 


estimates up to 95% by adopting SASE). 
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How Cloudflare One Works 


Cloudflare Services 


Browser Isolation 


DLP 
Zero Trust Secure Web 
Network Access Gateway 


Cloud Access DNS Filtering 


Security Broker 


Identity Proxy 


Device Posture 


Cloudflare On-ramps 


Trusted 
IP Tunnels ) Direct Connection Connectivity 


Email Security 


Cloudflare Network 
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DDoS Protection P 
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Service Load Balancing 
One Control 
Plane for 


Edge Services 


Clientless Access Device Client (SD-WAN partners 


Cloud Access Security Broker 


Zero Trust Network Access 


m Enforce Zero Trust rules that limit access to self-hosted 
corporate applications, SaaS applications, and private 
network IPs or hostnames. 


m Connect users faster and more safely than a VPN, reducing 
time spent on related IT tickets by 80%. 


m Works with multiple identity, endpoint protection, and cloud 
providers at the same time for optimal flexibility. 


Secure Web Gateway 


m Keep your data safe from malware, ransomware, phishing, 
command & control, Shadow IT, and other Internet risks 
over all ports and protocols. 


m Control data flows by enforcing DNS, HTTP, network, and 
browser isolation rules with unlimited TLS 1.3 inspection. 


m Deploy browser isolation to protect the data that live within 
web-based apps with controls over user actions. 


WAN as a Service 


m Any-to-any full mesh connectivity with natively-integrated 
security, performance, and control through one interface. 


m Partnerships with leading SD-WAN vendors make it easier 
to work with your existing investments. 


m Directly connect datacenters and branch offices with 
Cloudflare Network Interconnect (CNI) to increase reliability 
and improve performance with faster provisioning. 
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m Prevent data leaks with visibility and control of SaaS apps. 
m Discover Shadow IT and set allow / block policies for apps. 


m Scan SaaS apps via API integration for misconfigurations, 
improper access, and other risks to protect data at rest. 


m Add cloud email security (CES) to enhance protection for 
your most used and most targeted SaaS app — email. 


Firewall as a Service 


m Cloud-native network firewall for your enterprise. 


m Consistent network security policies across your entire 
WAN, including headquarters, branch offices, and virtual 
private clouds. 


m Deploy fine-grained filtering rules globally in under 500ms 
— all from a common dashboard. 


Cloudflare Network 


m Single-pass inspection for all traffic to ensure consistent 
and high speed protections for all users. 


m 100% uptime SLA for paid plans that only an Anycast 
architecture can deliver. 


m Architected with one composable, developer-friendly 
cloud platform that enables us to build and ship new 
services and to adopt new Internet and security quickly. 
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On-ramps to Cloudflare One 


Any User 
Broadband 


Managed devices 
add Cloudflare 
device client © 


50+ private 


Multicloud : 
__ interconnects 


configure Anycast 
IPSec tunnel from 
transit router 


with Microsoft, 
Amazon, Google 


Data centers / HQ 
direct connection or , 
configure Anycast 
GRE or IPsec tunnel 


270+ cities 
10,500+ interconnects 

L3 Anycast routing 

Fiber backbone 

Traffic acceleration 

IPv6, RPKI, TLS 1.3, and 
more standards supported 


Branch offices 
configure Anycast 
GRE or IPsec tunnel 
or direct connection 


Gartner® Peer Insights Reviews 


“Cloudflare's Zero-Trust service called Cloudflare One is 
top-notch and has helped protect our network from several 
attacks. Working with this vendor has been an absolute 
pleasure, they were there every step of the way 
understanding our needs and working with us to develop a 
global solution." 


Director, Professional Services 


‘We had already deployed Zscaler but were recommended 
Cloudflare One, and after much due diligence and 
benchmarking against our current provider and others, we 
opted for Cloudflare One and couldn’t have been happier. 
Experience to date has been more than positive.” 


Project Manager, $1-3B Transportation Compan 


Start your journey to a faster, more reliable, more secure network 


Request a consultation 
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Stats as of December 2021 


Gartner 
giada peerinsights.. 


“Definitely feels like a category definer, if not creator. 
The amount of innovation produced since the initial 
announcement in 2020 is nothing short of incredible." 


What do you like most?: “The clear vision the company has 
for how to take advantage of their edge network...” 


Chief Technology Officer, Insurance Company 


"We have been using Cloudflare One a lot and it's an 
all-in-one powerful service. Cloudflare Global Network makes 
our applications always available and Zero Trust service 
makes them protected, acting as an excellent alternative to 
our VPN.” 


Network Engineer, $3-10B Financial Compan 


Not ready for your 
assessment? 


Keep learning more 
about Cloudflare One 
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